[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 45.119358][ T25] audit: type=1800 audit(1575385902.540:25): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 45.139224][ T25] audit: type=1800 audit(1575385902.540:26): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 45.173927][ T25] audit: type=1800 audit(1575385902.540:27): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.112' (ECDSA) to the list of known hosts. 2019/12/03 15:11:52 fuzzer started 2019/12/03 15:11:54 dialing manager at 10.128.0.26:45711 2019/12/03 15:11:54 syscalls: 2689 2019/12/03 15:11:54 code coverage: enabled 2019/12/03 15:11:54 comparison tracing: enabled 2019/12/03 15:11:54 extra coverage: extra coverage is not supported by the kernel 2019/12/03 15:11:54 setuid sandbox: enabled 2019/12/03 15:11:54 namespace sandbox: enabled 2019/12/03 15:11:54 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 15:11:54 fault injection: enabled 2019/12/03 15:11:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 15:11:54 net packet injection: enabled 2019/12/03 15:11:54 net device setup: enabled 2019/12/03 15:11:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 15:11:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 15:11:55 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r3 = socket(0x1e, 0x805, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000100)=@assoc_value={r5}, 0x8) 15:11:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syzkaller login: [ 58.525399][ T8229] IPVS: ftp: loaded support on port[0] = 21 [ 58.698667][ T8229] chnl_net:caif_netlink_parms(): no params data found [ 58.738994][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state 15:11:56 executing program 2: socket$inet6(0xa, 0x1, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fdatasync(r0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) [ 58.749483][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.758570][ T8229] device bridge_slave_0 entered promiscuous mode [ 58.767870][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.789649][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.810232][ T8229] device bridge_slave_1 entered promiscuous mode [ 58.857610][ T8232] IPVS: ftp: loaded support on port[0] = 21 [ 58.891271][ T8229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.922006][ T8229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.977265][ T8234] IPVS: ftp: loaded support on port[0] = 21 [ 59.002733][ T8229] team0: Port device team_slave_0 added [ 59.026208][ T8229] team0: Port device team_slave_1 added 15:11:56 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x40096102, 0x0) [ 59.172293][ T8229] device hsr_slave_0 entered promiscuous mode [ 59.229905][ T8229] device hsr_slave_1 entered promiscuous mode 15:11:56 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) [ 59.311478][ T8236] IPVS: ftp: loaded support on port[0] = 21 [ 59.387081][ T8232] chnl_net:caif_netlink_parms(): no params data found [ 59.541707][ T8229] netdevsim netdevsim0 netdevsim0: renamed from eth0 15:11:57 executing program 5: r0 = open(&(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket$l2tp(0x18, 0x1, 0x1) lseek(0xffffffffffffffff, 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000240)) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0xc) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000080)=0x5) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000140)={'bpq0\x00', 0x8}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r2, 0x1) recvmsg(r2, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[@ANYPTR], 0x8) dup3(r5, r4, 0x0) finit_module(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f00000003c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2006000000000d0400000000fc000000006406", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'nlmon0\x00', r9}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000380)={r10, 0x1, 0x6, @remote}, 0x10) [ 59.592540][ T8229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.657560][ T8240] IPVS: ftp: loaded support on port[0] = 21 [ 59.673223][ T8229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.731313][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.738897][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.747010][ T8232] device bridge_slave_0 entered promiscuous mode [ 59.757533][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.765018][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.773068][ T8232] device bridge_slave_1 entered promiscuous mode [ 59.796912][ T8229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.851120][ T8234] chnl_net:caif_netlink_parms(): no params data found [ 59.876516][ T8242] IPVS: ftp: loaded support on port[0] = 21 [ 59.897356][ T8232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.912706][ T8232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.998300][ T8232] team0: Port device team_slave_0 added [ 60.015119][ T8232] team0: Port device team_slave_1 added [ 60.025158][ T8234] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.033583][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.042834][ T8234] device bridge_slave_0 entered promiscuous mode [ 60.050809][ T8234] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.057877][ T8234] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.066175][ T8234] device bridge_slave_1 entered promiscuous mode [ 60.084573][ T8236] chnl_net:caif_netlink_parms(): no params data found [ 60.114687][ T8234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.127528][ T8234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.190569][ T8232] device hsr_slave_0 entered promiscuous mode [ 60.228973][ T8232] device hsr_slave_1 entered promiscuous mode [ 60.268885][ T8232] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.283398][ T8236] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.291812][ T8236] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.301068][ T8236] device bridge_slave_0 entered promiscuous mode [ 60.311164][ T8236] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.319413][ T8236] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.327613][ T8236] device bridge_slave_1 entered promiscuous mode [ 60.351486][ T8234] team0: Port device team_slave_0 added [ 60.370874][ T8236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.395249][ T8234] team0: Port device team_slave_1 added [ 60.415388][ T8236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.521904][ T8234] device hsr_slave_0 entered promiscuous mode [ 60.559185][ T8234] device hsr_slave_1 entered promiscuous mode [ 60.598740][ T8234] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.613552][ T8240] chnl_net:caif_netlink_parms(): no params data found [ 60.688709][ T8236] team0: Port device team_slave_0 added [ 60.698929][ T8236] team0: Port device team_slave_1 added [ 60.713534][ T8242] chnl_net:caif_netlink_parms(): no params data found [ 60.727395][ T8229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.750203][ T8232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.784827][ T8232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.842005][ T8234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.875973][ T8234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.936552][ T8234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.986294][ T8232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.025026][ T8232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.111390][ T8236] device hsr_slave_0 entered promiscuous mode [ 61.148917][ T8236] device hsr_slave_1 entered promiscuous mode [ 61.218621][ T8236] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.226389][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.233901][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.241902][ T8240] device bridge_slave_0 entered promiscuous mode [ 61.249785][ T8234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.303087][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.312124][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.322807][ T8229] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.338929][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.345992][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.355431][ T8240] device bridge_slave_1 entered promiscuous mode [ 61.369496][ T8242] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.376826][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.385062][ T8242] device bridge_slave_0 entered promiscuous mode [ 61.394689][ T8242] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.402140][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.410190][ T8242] device bridge_slave_1 entered promiscuous mode [ 61.456688][ T8240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.476151][ T8242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.487384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.497203][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.505858][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.513175][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.522685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.534678][ T8240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.556107][ T8242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.571782][ T8236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.650585][ T8236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.695240][ T8236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.792000][ T8236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.820150][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.828960][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.837404][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.844588][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.853209][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.862746][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.871450][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.880438][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.888874][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.897306][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.905741][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.913923][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.922381][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.931201][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.941433][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.951427][ T8229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.962178][ T8242] team0: Port device team_slave_0 added [ 61.970903][ T8240] team0: Port device team_slave_0 added [ 61.980202][ T8240] team0: Port device team_slave_1 added [ 62.031627][ T8240] device hsr_slave_0 entered promiscuous mode [ 62.069909][ T8240] device hsr_slave_1 entered promiscuous mode [ 62.108848][ T8240] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.122343][ T8234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.134976][ T8242] team0: Port device team_slave_1 added [ 62.189723][ T8234] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.241501][ T8242] device hsr_slave_0 entered promiscuous mode [ 62.299931][ T8242] device hsr_slave_1 entered promiscuous mode [ 62.358635][ T8242] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.369437][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.377306][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.385647][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.393576][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.431201][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.443913][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.453717][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.460870][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.468855][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.477370][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.485803][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.492886][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.500582][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.510553][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.520666][ T8229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.527696][ T3889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.538252][ T8232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.551015][ T8236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.557860][ T8240] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.600988][ T8240] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.630770][ T8240] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.704483][ T8232] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.718907][ T8240] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.760293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.770111][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.778946][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.786994][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.797068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.805024][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.820377][ T8236] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.850979][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.859537][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.871915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.890151][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.918448][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 167.925281][ C1] rcu: 1-...!: (1 GPs behind) idle=21a/1/0x4000000000000002 softirq=11315/11317 fqs=43 [ 167.935268][ C1] (t=10501 jiffies g=6381 q=65) [ 167.940198][ C1] rcu: rcu_preempt kthread starved for 10416 jiffies! g6381 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 167.951282][ C1] rcu: RCU grace-period kthread stack dump: [ 167.957155][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 167.965040][ C1] Call Trace: [ 167.968326][ C1] __schedule+0x9a0/0xcc0 [ 167.972654][ C1] schedule+0x181/0x210 [ 167.976800][ C1] schedule_timeout+0x14f/0x240 [ 167.981634][ C1] ? run_local_timers+0x120/0x120 [ 167.986653][ C1] rcu_gp_kthread+0xed8/0x1770 [ 167.991413][ C1] kthread+0x332/0x350 [ 167.995464][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 168.000560][ C1] ? kthread_blkcg+0xe0/0xe0 [ 168.005138][ C1] ret_from_fork+0x24/0x30 [ 168.009557][ C1] NMI backtrace for cpu 1 [ 168.013878][ C1] CPU: 1 PID: 43 Comm: kworker/1:1 Not tainted 5.4.0-syzkaller #0 [ 168.021666][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.032678][ C1] Workqueue: events linkwatch_event [ 168.038146][ C1] Call Trace: [ 168.041414][ C1] [ 168.044258][ C1] dump_stack+0x1fb/0x318 [ 168.048576][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 168.053497][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 168.059636][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 168.065707][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 168.071679][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 168.077557][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 168.082662][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 168.087856][ C1] ? trace_hardirqs_off+0x74/0x80 [ 168.092891][ C1] update_process_times+0x12d/0x180 [ 168.098079][ C1] tick_sched_timer+0x263/0x420 [ 168.102918][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 168.108454][ C1] __hrtimer_run_queues+0x403/0x840 [ 168.113653][ C1] hrtimer_interrupt+0x38c/0xda0 [ 168.118597][ C1] ? debug_smp_processor_id+0x9/0x20 [ 168.123869][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 168.129404][ C1] apic_timer_interrupt+0xf/0x20 [ 168.134418][ C1] [ 168.137344][ C1] RIP: 0010:mod_memcg_page_state+0x16/0x190 [ 168.143222][ C1] Code: 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 54 53 41 89 f6 48 89 fb e8 da 28 2e 00 <48> 83 c3 38 48 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 [ 168.162968][ C1] RSP: 0018:ffffc90000e676d0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 168.171381][ C1] RAX: ffffffff81487326 RBX: ffffea00028b7940 RCX: ffff8880a9978440 [ 168.179346][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00028b7940 [ 168.187307][ C1] RBP: ffffc90000e676f0 R08: 000000000003a768 R09: fffffbfff120248a [ 168.195267][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff888094464ea0 [ 168.203223][ C1] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a8d93a28 [ 168.211201][ C1] ? mod_memcg_page_state+0x16/0x190 [ 168.216478][ C1] free_thread_stack+0x168/0x590 [ 168.221408][ C1] put_task_stack+0xa3/0x130 [ 168.225987][ C1] finish_task_switch+0x3f1/0x550 [ 168.231003][ C1] __schedule+0x9a8/0xcc0 [ 168.235327][ C1] ? ___preempt_schedule+0x16/0x18 [ 168.240426][ C1] preempt_schedule+0xdb/0x120 [ 168.245176][ C1] ___preempt_schedule+0x16/0x18 [ 168.250282][ C1] ? vprintk_emit+0x2fe/0x3a0 [ 168.254945][ C1] ? vprintk_emit+0x368/0x3a0 [ 168.259641][ C1] vprintk_emit+0x36d/0x3a0 [ 168.264158][ C1] vprintk_default+0x28/0x30 [ 168.268742][ C1] vprintk_func+0x158/0x170 [ 168.273252][ C1] printk+0x62/0x8d [ 168.277066][ C1] ? addrconf_notify+0xd37/0x3c90 [ 168.282075][ C1] ? addrconf_notify+0x779/0x3c90 [ 168.287085][ C1] addrconf_notify+0x2c8d/0x3c90 [ 168.292013][ C1] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 168.297415][ C1] ? __local_bh_enable_ip+0x13a/0x240 [ 168.302795][ C1] ? clusterip_netdev_event+0x48b/0x4a0 [ 168.308460][ C1] ? trace_hardirqs_on+0x74/0x80 [ 168.313401][ C1] ? __local_bh_enable_ip+0x13a/0x240 [ 168.318764][ C1] ? clusterip_netdev_event+0x48b/0x4a0 [ 168.324301][ C1] ? tls_dev_event+0x619/0xc00 [ 168.329059][ C1] ? clusterip_netdev_event+0x48b/0x4a0 [ 168.334595][ C1] ? ip6mr_device_event+0x1ee/0x210 [ 168.339782][ C1] raw_notifier_call_chain+0xec/0x190 [ 168.345144][ C1] netdev_state_change+0x147/0x1f0 [ 168.350250][ C1] linkwatch_do_dev+0x10e/0x160 [ 168.355088][ C1] __linkwatch_run_queue+0x446/0x730 [ 168.360388][ C1] linkwatch_event+0x4c/0x60 [ 168.364968][ C1] process_one_work+0x7ef/0x10d0 [ 168.369913][ C1] worker_thread+0xc01/0x1630 [ 168.374596][ C1] kthread+0x332/0x350 [ 168.378648][ C1] ? rcu_lock_release+0x30/0x30 [ 168.383481][ C1] ? kthread_blkcg+0xe0/0xe0 [ 168.388064][ C1] ret_from_fork+0x24/0x30